Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa
File:                     34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa (raw, json)
Hash identifier:          81Ba8NpCyVpADZZbfgiYPAuSplQw5HcvFECLSE+YHsg=
Subject key identifier:   CC:C0:22:49:C9:12:93:C6:94:3D:46:E0:3F:EE:DD:3B:69:B9:DE:F5
Certificate issuer:       /CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8
Certificate serial:       2B1AA18CB21EA1B268A2DBF0CDEFF6C7DFA34692
Authority key identifier: 8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa
Signing time:             Fri 05 Apr 2024 02:38:16 +0000
ROA not before:           Fri 05 Apr 2024 02:33:16 +0000
ROA not after:            Fri 04 Apr 2025 02:38:16 +0000
asID:                     267147
IP address blocks:        45.229.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:a1:8c:b2:1e:a1:b2:68:a2:db:f0:cd:ef:f6:c7:df:a3:46:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F69EC4070CE7658D3059640F9268DDF17E8B1A8
        Validity
            Not Before: Apr  5 02:33:16 2024 GMT
            Not After : Apr  4 02:38:16 2025 GMT
        Subject: CN=CCC02249C91293C6943D46E03FEEDD3B69B9DEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:0c:20:db:7b:16:f8:f8:12:92:78:43:1c:
                    e8:2e:2d:d2:ba:18:69:f1:2a:c6:a3:0e:cd:82:3e:
                    13:93:82:8a:a2:4c:15:9b:1c:39:45:07:6b:6d:1f:
                    09:f3:99:34:c1:69:86:27:47:68:22:6d:39:3a:25:
                    40:b6:64:e1:e0:85:7f:91:c3:c0:da:7d:e9:9c:03:
                    c1:30:4f:75:56:af:c5:92:9b:d2:e1:29:b6:4f:e8:
                    02:ce:18:dc:e1:93:f1:f3:b7:c9:79:5d:13:ac:3a:
                    5d:ba:a8:22:a9:8c:6b:d7:76:ef:79:e2:76:20:79:
                    18:9c:6c:95:63:4d:93:e6:d9:63:57:3a:10:ad:9e:
                    55:64:7a:95:ed:af:9e:08:d9:9a:17:ce:6c:73:59:
                    d3:13:f1:38:47:fd:e8:d8:ad:cf:39:d0:21:38:00:
                    b7:26:7f:38:af:97:14:4c:05:b4:81:a3:81:41:05:
                    07:65:c1:91:f4:f1:64:b9:60:ae:e8:ea:fc:27:04:
                    b4:78:91:21:d3:fa:7a:61:02:66:23:e4:25:56:0c:
                    36:fe:49:df:20:63:c9:ee:2d:68:96:08:1a:73:14:
                    05:5c:93:90:0e:bb:e4:b5:c5:8b:a8:0a:03:8c:17:
                    44:48:32:e7:1f:af:f9:94:86:5d:d1:b1:7b:17:38:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C0:22:49:C9:12:93:C6:94:3D:46:E0:3F:EE:DD:3B:69:B9:DE:F5
            X509v3 Authority Key Identifier:
                keyid:8F:69:EC:40:70:CE:76:58:D3:05:96:40:F9:26:8D:DF:17:E8:B1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F69EC4070CE7658D3059640F9268DDF17E8B1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QQgQvBNDWgDFvbzU12VsqXaWeutroNve8xSwTfsjByi/1/34352e3232392e3130302e302f32322d3234203d3e20323637313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:27:fb:c8:10:70:6b:ff:70:ce:11:38:17:88:12:c3:ab:35:
         96:05:dd:a3:e4:bb:b9:e1:72:3d:f0:b3:a0:76:8d:b0:e3:33:
         ad:00:05:27:fc:8f:df:a9:ed:19:cd:da:19:5a:2f:f7:11:1f:
         c3:f6:32:e5:48:c5:82:59:5c:36:29:69:10:b0:9b:0b:c2:07:
         c1:03:24:b4:7a:ed:65:4e:92:4f:48:94:ca:c4:ac:b4:c3:77:
         87:24:d1:9a:42:ad:cf:69:fd:c9:b7:46:dd:64:ec:0b:04:ff:
         e3:1e:d2:20:0f:0b:ed:c2:56:39:db:08:e5:fa:0b:2e:05:0a:
         af:64:42:00:a7:6d:05:51:f8:97:11:8f:df:c3:2d:c0:36:5b:
         e8:94:9c:33:00:37:92:e8:3d:cd:a2:b6:ba:83:d2:0c:12:93:
         64:86:70:39:e1:bf:6b:32:fa:52:6a:97:61:bb:0f:d7:e0:37:
         46:43:77:19:1d:9d:47:33:65:cd:83:b1:ea:99:5b:16:2b:0f:
         c4:43:bc:eb:6e:1f:b5:9e:be:d3:0d:c3:9f:72:a6:24:f9:d8:
         f0:8f:79:c1:4c:d4:df:e9:7f:1e:c5:7a:27:05:0d:e8:03:5a:
         56:23:dd:6d:84:7f:48:a3:6e:81:c5:eb:58:af:da:ef:67:f6:
         92:59:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 16:40:42 2024 by rpki-client on console-fra.rpki-client.org